easly.
Security and data

Your data belongs to you

Invoices, receipts and personnel data are confidential. Here's exactly how Easly protects them - and where the limits are.

Your own isolated instance

Every customer gets their own application with its own database, its own storage and its own key - completely separate from all other instances.

Stored encrypted

The database, documents, receipts and personnel files are encrypted on disk. Backups are encrypted too. Data is always transmitted over HTTPS.

Operated in Switzerland

The instances run on servers in Switzerland, operated by IT Services Schneeberger.

Two-factor sign-in

Two factors are mandatory: a passkey (for example Windows Hello, Face ID or a security key) or an authenticator app.

Support only with your code

Support can only get into your instance if you create a time-limited code yourself. Every action is logged and visible to you.

Daily backup, export at any time

An encrypted backup of your instance every night, going back up to 12 months. Plus your own export at any time: all data as Excel and CSV, all documents as a ZIP.

In detail

Separate instances instead of one big database

Easly is not an application that keeps all its customers' data in one shared database. Your instance has its own database, its own file storage for receipts, PDFs and personnel documents, and its own key.

What is encrypted

  • the database of your instance
  • documents such as quotes, invoices and delivery notes
  • uploaded receipts
  • personnel files with contracts, payslips and salary certificates
  • the backups

The connection between your browser and Easly is always encrypted via HTTPS.

Sign-in and access

After ordering, you receive a one-time link by email. You use it to set your password and set up the second factor - a passkey or an authenticator app. Without a second factor, you can't sign in.

Support access only with your approval

If you need help, you create a time-limited access code in Easly and give it to support. That code is the only way support can get into your instance. Every action is logged, and you can see the log yourself.

Daily data backup

Every night we back up your instance - the database and all files, encrypted and separate from all other instances. We keep the backups from the last 14 days, plus one per week for 8 weeks and one per month for 12 months.

Restore on request

Did you accidentally delete or overwrite something? In Easly, go to Settings → Data & recovery, select a backup and request a restore. We review the request and reset your instance to that point; before doing so, we back up its current state. Anything recorded after the selected point in time will then no longer be in the instance - if anything is unclear, we discuss it with you.

Export and cancellation

You can download a complete export at any time: all data as Excel and CSV files, plus all documents such as invoices, receipts and contracts, together as a ZIP. The Excel and CSV files can be used in other software. After you cancel, your instance stays readable for another 30 days so you can export everything. After that, your data is deleted.

The export is a complete copy of your data in plain text. Keep it somewhere safe, and don't store it unencrypted in a publicly shared folder.

Your own accounts

Email, AI features and Swiss Post shipping run on your own accounts and keys. This also means that when you use them, the data they need goes to these providers.

  • Email: Documents are sent through your mailbox (Microsoft 365 or SMTP/IMAP), and receipts are fetched from it.
  • AI features: To read a receipt or document, correct a text or answer a question in the help, the content needed goes to the provider you have chosen - Anthropic (Claude) or OpenAI (ChatGPT) - using your API key. Without AI access, nothing is transmitted to an AI provider.
  • Swiss Post shipping: To create a label, the sender and recipient addresses go to Swiss Post.

Easly also uses public services that don't require an account of your own:

  • Address search and distance suggestion: What you type into the address field is sent to OpenStreetMap (Nominatim) to get suggestions; for the distance suggestion, the coordinates of the start and destination go to the OSRM routing service.
  • Exchange rates: For receipts in a foreign currency, the daily VAT (MWST) exchange rate is retrieved from the Federal Office for Customs and Border Security FOCBS (BAZG) - only the currency and date are transmitted.

What we don't claim

Easly is not "end-to-end encrypted": the application has to be able to read your data, for example to generate a PDF or calculate a VAT return. As with any hosting, the server operators have technical access to the running systems. This is governed by the binding data processing agreement. Nor do we advertise certifications - instead, we describe here what we actually do.

Contracts and privacy

You are responsible for your data in Easly; IT Services Schneeberger processes it on your behalf. The details are set out in these documents:

Questions about security?

We're happy to explain how your instance is set up.